Support for blocking configured commands executed by AI Agent processes - #11730

Open

kylewanginchina wants to merge 24 commits into

mainfrom

support-ai-agent-block

Commits on May 13, 2026

feat(agent): add ai agent enforcement config
kylewanginchina
committed
fc404a7
feat(agent): add ai agent enforcement strategies
kylewanginchina
committed
5529446
feat(agent): add proc block event model
kylewanginchina
committed
fcd3798
feat(server): route ai agent block events
kylewanginchina
committed
00ef425
feat(server): add proc block event schema
kylewanginchina
committed
2f4a974
feat(agent): detect kernel enforcement capabilities
kylewanginchina
committed
da5c0ca
feat(agent): emit audit-only ai agent block events
kylewanginchina
committed
272544c
feat(ebpf): support loading lsm programs
kylewanginchina
committed
c89487c
fix(ebpf): keep optional lsm programs non-fatal
kylewanginchina
committed
ca7f3b0
test(ebpf): assert ai agent exec enforcement contract
kylewanginchina
committed
7742c79
feat(agent): sync ai agent enforcement policy to bpf
kylewanginchina
committed
bdff01e
fix(ebpf): harden ai agent exec lsm enforcement
kylewanginchina
committed
7eebc06
feat(agent): support ai agent syscall override enforcement
kylewanginchina
committed
ceeaeca
fix(server): gofmt native tag table names
kylewanginchina
committed
247ae19

Commits on May 15, 2026

feat(agent): support ai agent argv enforcement
kylewanginchina
committed
c67f890

Commits on May 18, 2026

fix(server): add proc block event upgrade issue
kylewanginchina
committed
e12e06a

Commits on May 19, 2026

feat(agent): raise ai agent exec rule cap to 256
kylewanginchina
committed
d1465af

Commits on May 20, 2026

docs(agent): clarify ai agent enforcement config
kylewanginchina
committed
ac15b71

Commits on May 21, 2026

Commits on May 29, 2026

Commits on May 31, 2026

feat(agent): support ai agent exec for cmdline prefixes
kylewanginchina
committed
cab55fa